This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A913F0DF/E5083648992811EEBBCAE87AC4F9AE02/7C7AF8E6E67011EEB76DCB76C4F9AE02.roa
File:                     7C7AF8E6E67011EEB76DCB76C4F9AE02.roa (raw, json)
Hash identifier:          CH0RcTjT3+/CHefP1yxI2QXlV1Q7xfsQAzCv5/ZeECQ=
Subject key identifier:   C4:C3:44:76:72:3F:72:CA:0C:A1:23:99:98:AE:92:33:29:5D:34:86
Certificate issuer:       /CN=A913F0DF/serialNumber=9D08BF38A0D38B8CAB7CFD88F5D8C4ED66778CC1
Certificate serial:       018A
Authority key identifier: 9D:08:BF:38:A0:D3:8B:8C:AB:7C:FD:88:F5:D8:C4:ED:66:77:8C:C1
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nQi_OKDTi4yrfP2I9djE7WZ3jME.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A913F0DF/E5083648992811EEBBCAE87AC4F9AE02/7C7AF8E6E67011EEB76DCB76C4F9AE02.roa
Signing time:             Fri 09 Jan 2026 03:23:34 +0000
ROA not before:           Fri 09 Jan 2026 03:23:34 +0000
ROA not after:            Wed 31 Mar 2027 00:00:00 +0000
asID:                     152155
IP address blocks:        36.50.76.0/24 maxlen: 24
                          2001:df3:4440::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A913F0DF/E5083648992811EEBBCAE87AC4F9AE02/nQi_OKDTi4yrfP2I9djE7WZ3jME.crl
                          rsync://rpki.apnic.net/member_repository/A913F0DF/E5083648992811EEBBCAE87AC4F9AE02/nQi_OKDTi4yrfP2I9djE7WZ3jME.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nQi_OKDTi4yrfP2I9djE7WZ3jME.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 01 Feb 2026 02:51:55 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 394 (0x18a)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A913F0DF, serialNumber=9D08BF38A0D38B8CAB7CFD88F5D8C4ED66778CC1
        Validity
            Not Before: Jan  9 03:23:34 2026 GMT
            Not After : Mar 31 00:00:00 2027 GMT
        Subject: CN=696074b6-40fa
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:45:8d:01:95:f1:c0:bc:6a:48:17:d0:c4:2a:
                    83:18:0c:0b:3a:66:2d:05:4c:8b:71:90:54:23:73:
                    6a:bd:63:78:72:f9:8a:0b:37:22:fd:86:d2:8b:b7:
                    b0:46:40:f8:a4:86:03:70:0e:0d:85:bc:7b:4e:bc:
                    d0:8a:9e:81:9a:32:5b:bf:0e:4b:ab:83:6d:7a:ca:
                    2c:07:1c:1e:2d:81:91:55:bc:25:bc:21:0f:a9:6c:
                    10:6b:76:11:fb:65:64:7d:21:98:31:2a:e4:05:c8:
                    a6:1f:62:8d:0f:79:ae:d5:57:76:15:98:05:43:0d:
                    f3:b9:5c:50:6b:fd:f5:b5:bb:78:23:ca:ca:b9:79:
                    33:4c:5b:7f:2d:17:3d:62:d2:66:6d:fc:48:19:dd:
                    50:97:b3:c8:03:3c:bb:70:5d:c7:b5:18:02:bf:35:
                    a1:7e:e5:a8:af:d3:e2:64:3d:2c:98:ee:28:cd:68:
                    ff:f3:0e:05:5b:9b:37:17:68:a4:e0:d0:91:0a:a6:
                    05:29:b1:fd:a0:a4:9d:5a:b8:55:79:50:43:be:57:
                    63:58:46:26:84:66:c7:51:7a:99:dc:cb:6e:60:fd:
                    03:82:3c:18:a6:40:1e:ac:87:b4:7c:38:76:f1:6a:
                    96:da:d2:7e:71:d9:9f:64:68:00:b9:12:b7:fc:67:
                    0b:f7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C4:C3:44:76:72:3F:72:CA:0C:A1:23:99:98:AE:92:33:29:5D:34:86
            X509v3 Authority Key Identifier:
                keyid:9D:08:BF:38:A0:D3:8B:8C:AB:7C:FD:88:F5:D8:C4:ED:66:77:8C:C1

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A913F0DF/E5083648992811EEBBCAE87AC4F9AE02/nQi_OKDTi4yrfP2I9djE7WZ3jME.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nQi_OKDTi4yrfP2I9djE7WZ3jME.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A913F0DF/E5083648992811EEBBCAE87AC4F9AE02/7C7AF8E6E67011EEB76DCB76C4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  36.50.76.0/24
                IPv6:
                  2001:df3:4440::/48

    Signature Algorithm: sha256WithRSAEncryption
         77:3f:1c:4c:fa:67:3e:3c:fc:8f:59:fd:db:b8:53:61:1b:5c:
         3b:0c:4d:41:f6:54:e3:0a:06:6c:26:1f:cc:10:11:cd:37:ca:
         3d:9f:03:a2:14:ea:55:19:d7:18:43:29:ff:f6:ce:9e:4d:88:
         73:39:23:1e:dd:0c:5e:48:0f:8c:d5:76:97:82:60:7e:47:66:
         d0:ae:73:93:c1:a9:bf:11:93:82:7a:93:7f:66:a2:28:d4:c0:
         28:c7:47:c3:97:6d:a5:78:b8:33:70:22:9b:54:00:93:48:87:
         50:eb:91:1e:75:5e:b4:dc:67:1e:e1:5b:76:cd:a2:5d:85:97:
         17:e9:1a:c8:70:dc:b0:99:31:f7:d8:df:b4:fa:d6:f6:ab:9d:
         9b:03:a4:c0:f1:3a:08:af:83:29:5c:71:48:af:56:de:be:2d:
         e5:2c:90:1b:cc:90:b4:bd:e1:9a:d0:5c:23:c8:2b:e9:aa:16:
         2d:b3:08:89:08:79:3a:bd:ac:a2:8a:02:72:01:55:ec:c8:83:
         5a:fe:91:87:05:d3:60:19:a1:20:3b:b9:70:a8:37:30:17:6a:
         13:0e:9f:d5:b0:33:fb:d4:8f:a2:1f:d4:e7:9c:44:f7:ed:20:
         ab:3f:f0:07:72:5d:92:2c:0e:ad:48:04:e6:36:3d:a4:b1:e2:
         68:27:0e:0d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 07:48:50 2026 by rpki-client